art

1. Sardar Patel Memorial Society’s (Trust)
RAJIV GANDHI COLLEGE OF ENGINEERING,
RESEARCH AND TECHNOLOGY, CHANDRAPUR
Department of Computer Science and Engineering
SEMESTER-V
SESSION-2021-22
A SEMINAR ON
CYBER SECURITY
Under the guidance of
Prof.Dr.Nitin Janwe
AND
SEMINAR IN-CHARGE
Prof. Madhavi Sadu
Presented By-
SHRUTIKA ATUL SAKARKAR[CSEB503]

2. CONTENTS:-
-Introduction
-What is cyber security?
-Types of cyber security
-Cyber attacks / Cyber crime
-Why do cyber attacks happen?
-Types of cyber attacks
-Hackers and attackers
-Types of hackers
-Why is cyber security important?
-Advantages and Disadvantages
-Cyber security tips
-Conclusion
-References

3. INTRODUCTION:-
-Cyber attacks are increasing day by day so to protect the system and data
from this attacks some cyber security measures are taken.
-The need of cyber security was felt when cyber attacks were increasing and
people were getting problem from it.
-The multinational companies and industries having a great amount of
possessive data, so there protection is important as well as the details of
clients and there contracts are very sensitive so that every company needs
cyber security.
-When the data is protected by means of technical security we can say it
cyber security.

4. WHAT IS CYBER SECURITY?
-Cyber security is the application of technologies, processes and controls
to protect systems, networks, programs, devices and data from cyber
attacks.
-It aims to reduce the risk of cyber attacks and protect against the
unauthorized exploitation of systems, networks and technologies.
-It is also known as information tech security or network information
security in common.
-The main purpose of cyber security is to protect all organizational assets
from both external and internal threats as well as disruptions caused due
to natural disasters.

5. TYPES OF CYBER SECURITY:-
• Network security
•Application security
•Information security
•Operational security

6. 1]NETWORK SECURITY:-
-It is a set of rules and configurations designed to protect the
integrity, confidentiality and accessibility of computer networks and
data using both software and hardware technologies.
-It includes both hardware and software technologies.
-It targets a variety of threats.
-It stops them from entering or spreading on your network.
-Effective network security manages access to the network.

7. 2]APPLICATION SECURITY:-
-Application security is the process of developing, adding, and
testing security features within applications to prevent security
vulnerabilities against threats such as unauthorized access and
modification.
-Much of this happens during the development phase, but it
includes tools and methods to protect apps once they are
deployed.
-This is becoming more important as hackers increasingly target
applications with their attacks.

8. 3]INFORMATION SECURITY:-
-Information Security is basically the practice of preventing
unauthorized access, use, disclosure, disruption, modification,
inspection, recording or destruction of information.
-The goal is to ensure the safety and privacy of critical data such as
customer account details, financial data or intellectual property.
-Ensures that only authorized users (confidentiality) have access to
accurate and complete information (integrity) when required
(availability).

9. 4]OPERATIONAL SECURITY:-
-Operational security (OPSEC) is a security and risk management
process that prevents sensitive information from getting into the
wrong hands.
-Things that fall under the OPSEC umbrella include monitoring
behaviors and habits on social media sites as well as discouraging
employees from sharing login credentials via email or text message.
-Operational security forces managers to dive deeply into their
operations and figure out where their information can be easily
breached.

10. CYBER ATTACKS/CYBER CRIME:-
-A cyber attack is an attempt to disable computers, steal data, or use
a breached computer system to launch additional attacks.
-It aims to disable, disrupt, destroy or control computer systems or
to alter, block, delete, manipulate or steal the data held within these
systems.
-It can be launched from anywhere by any individual or group using
one or more various attack strategies.

11. WHY DO CYBER ATTACKS HAPPEN?
Cyber attacks are designed to cause damage. They can
have various objectives, including the following:
1]Financial gain
2]Disruption and revenge
3]Cyber warfare

12. TYPES OF CYBER ATTACKS:-

13. TYPES OF CYBER ATTACKS:-
1. Injection attacks- It is the attack in which some data will be injected into a web
application to manipulate the application and fetch the required information.
Example- SQL Injection, code Injection, log Injection, XML Injection etc.
2. DNS Spoofing- DNS Spoofing is a type of computer security hacking. Whereby a
data is introduced into a DNS resolver's cache causing the name server to return an
incorrect IP address, diverting traffic to the attackers computer or any other
computer. The DNS spoofing attacks can go on for a long period of time without
being detected and can cause serious security issues.
3. Session Hijacking- It is a security attack on a user session over a protected
network. Web applications create cookies to store the state and user sessions. By
stealing the cookies, an attacker can have access to all of the user data.
4. Phishing- Phishing is a type of attack which attempts to steal sensitive
information like user login credentials and credit card number. It occurs when an
attacker is masquerading as a trustworthy entity in electronic communication.

14. 5. Brute force-It is a type of attack which uses a trial and error method. This attack
generates a large number of guesses and validates them to obtain actual data like
user password and personal identification number. This attack may be used by
criminals to crack encrypted data, or by security, analysts to test an organization's
network security.
6. Denial of Service- It is an attack which meant to make a server or network
resource unavailable to the users. It accomplishes this by flooding the target with
traffic or sending it information that triggers a crash. It uses the single system and
single internet connection to attack a server.
7. Dictionary attacks- This type of attack stored the list of a commonly used
password and validated them to get original password.
8. URL Interpretation- It is a type of attack where we can change the certain parts
of a URL, and one can make a web server to deliver web pages for which he is not
authorized to browse.

15. 9. File Inclusion attacks- It is a type of attack that allows an attacker to access
unauthorized or essential files which is available on the web server or to execute
malicious files on the web server by making use of the include functionality.
10. Man in the middle attacks- It is a type of attack that allows an attacker to
intercepts the connection between client and server and acts as a bridge between
them. Due to this, an attacker will be able to read, insert and modify the data in the
intercepted connection.

16. Hackers and attackers:-
“Hacker” is another name for an ethical researcher. It refers to someone who
proactively explores, identifies and alerts organizations to vulnerabilities that an
attacker could use for malicious purposes. They seek to disclose in good faith by
alerting organizations that may or may not have vulnerability disclosure policies.
An “attacker,” on the other hand, is just that. It’s someone who gains
unauthorized access to someone else’s network and computers for malicious
purposes. An attacker probes for vulnerabilities, but unlike a hacker, the attacker
exploits them without permission or without warning the organization

17. TYPES OF HACKERS:-
1. Black Hat Hacker-
Black-hat Hackers are also known as an Unethical Hacker or
a Security Cracker. These people hack the system illegally to
steal money or to achieve their own illegal goals.
2. White Hat Hacker-
White hat Hackers are also known as Ethical Hackers or a
Penetration Tester. White hat hackers are the good guys of
the hacker world.
3. Gray Hat Hacker-
Gray hat Hackers are Hybrid between Black hat Hackers and
White hat hackers. They can hack any system even if they
don't have permission to test the security of the system but
they will never steal money or damage the system.

18. WHY IS CYBER SECURITY IMPORTANT:-
-The importance of cyber security comes down with the desire to keep information,
data, and devices private and safe. In today’s world, people store vast quantities
of data on computers and other internet-connected devices.
- By implementing security, businesses and individuals can protect themselves
against the full range of cyber security threats outlined below, as well as the
numerous others that exist.
-In the case of public services or governmental organizations, cyber security
helps ensure that the community can continue to rely on their services.
-With cyber security, companies do not have to worry about unauthorized users
accessing their network or data. It helps them protect both their end users and
their employees.

19. ADVANTAGES AND DISADVANTAGES OF CYBER
SECURITY:-
Advantages:-
• Protects system against
viruses, worms, spyware and
other unwanted programs.
• Protection against data from
theft.
• Protects the computer from
being hacked.
• Minimizes computer freezing
and crashes.
• Gives privacy to users
Disadvantages:-
• Firewalls can be difficult to
configure correctly.
• Incorrectly configured firewalls
may block users from performing
certain actions on the Internet,
until the firewall configured
correctly.
• Makes the system slower than
before.
• Need to keep updating the new
software in order to keep security
up to date.
• Could be costly for average user.

20. CYBER SECURITY TIPS:-
• Install a firewall
• Set up an Access Control List
• Change the default passwords for the company's point of sale
system
• Establish security roles and responsibilities
• Establish policies for Internet and social media usage
• Use a Web-filtering system
• Use Internet security programs on each computer
• Be aware of peer-to-peer sites
• Keep the most critical data offline
• Get cybercrime insurance

21. CONCLUSION:-
- Cyber security was introduced to reduce cyber crimes.
- This crimes will affect the loss of revenue , waste of
valuable time , damage reputation and reduce
productivity.
- As an IT user , we should have to be aware of some of
the cyber laws in the country.
- Hopefully, we can be more careful and never involve in
any cyber crime.

22. REFERENCES:-
www.javatpoint.com
www.studyMaria.org
www.techtarget.com
www.logpoint.com

23. THANK
YOU!!